|
@@ -1,20 +1,20 @@
|
|
require glibc.inc
|
|
require glibc.inc
|
|
require glibc-version.inc
|
|
require glibc-version.inc
|
|
|
|
|
|
-CVE_CHECK_WHITELIST += "CVE-2020-10029 CVE-2021-27645"
|
|
|
|
|
|
+CVE_CHECK_IGNORE += "CVE-2020-10029 CVE-2021-27645"
|
|
|
|
|
|
# glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010022
|
|
# glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010022
|
|
# glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010023
|
|
# glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010023
|
|
# glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010024
|
|
# glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010024
|
|
# Upstream glibc maintainers dispute there is any issue and have no plans to address it further.
|
|
# Upstream glibc maintainers dispute there is any issue and have no plans to address it further.
|
|
# "this is being treated as a non-security bug and no real threat."
|
|
# "this is being treated as a non-security bug and no real threat."
|
|
-CVE_CHECK_WHITELIST += "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024"
|
|
|
|
|
|
+CVE_CHECK_IGNORE += "CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024"
|
|
|
|
|
|
# glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010025
|
|
# glibc https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1010025
|
|
# Allows for ASLR bypass so can bypass some hardening, not an exploit in itself, may allow
|
|
# Allows for ASLR bypass so can bypass some hardening, not an exploit in itself, may allow
|
|
# easier access for another. "ASLR bypass itself is not a vulnerability."
|
|
# easier access for another. "ASLR bypass itself is not a vulnerability."
|
|
# Potential patch at https://sourceware.org/bugzilla/show_bug.cgi?id=22853
|
|
# Potential patch at https://sourceware.org/bugzilla/show_bug.cgi?id=22853
|
|
-CVE_CHECK_WHITELIST += "CVE-2019-1010025"
|
|
|
|
|
|
+CVE_CHECK_IGNORE += "CVE-2019-1010025"
|
|
|
|
|
|
DEPENDS += "gperf-native bison-native make-native"
|
|
DEPENDS += "gperf-native bison-native make-native"
|
|
|
|
|